I additionally:

1) created both a user & role in
/tomcat/conf/tomcat-users.xml
2) the same in:
server/config/fedora-users.xml
3) added a role in the section regarding APIA
 <security-constraint>
      <web-resource-collection>
        <web-resource-name>Fedora Repository Server</web-resource-name>
        <description>Fedora-generated security-constraint</description>
        <description>APIA</description>
        <url-pattern>/</url-pattern>
        <url-pattern>/describe</url-pattern>
        <url-pattern>/get/*</url-pattern>
        <url-pattern>/getAccessParmResolver</url-pattern>
        <url-pattern>/getObjectHistory/*</url-pattern>
        <url-pattern>/listDatastreams/*</url-pattern>
        <url-pattern>/listMethods/*</url-pattern>
        <url-pattern>/oai</url-pattern>
        <url-pattern>/report</url-pattern>
        <url-pattern>/risearch</url-pattern>
        <url-pattern>/search</url-pattern>
        <url-pattern>/services/access</url-pattern>
        <url-pattern>/wsdl</url-pattern>
        <url-pattern>*.jsp</url-pattern>
      </web-resource-collection>
      <auth-constraint>
       <role-name>myuserrole</role-name>
     </auth-constraint>
4) the same at the end of this file
<security-role>
      <role-name>administrator</role-name>
      <role-name>myuserrole</role-name>
    </security-role>
5) I reloaded policies

and still thre's no positive result.... Do you have any idea what I'm doing 
wrong?



Regards,
Damian



===8<===============Treść oryginalnej wiadomości===============
Dear All,

I'm  trying to use SaxonServlet provided within FC where xml-source is
one of the objects DC
http://server:port/fedora/get/ns:myobject/DC

style  is  url  pointing  to  a  file located under the same tomcat as
fedora but different context

http://server:port/othercontext/stylesheet.xsl
so the whole url looks like:


http://server:port/saxon/SaxonServlet?source=http://server:port/fedora/get/ns:myobject/DC&style=http://server:port/othercontext/stylesheet.xsl&clear-stylesheet-cache=yes

After that I get the exception:

java.io.IOException: HTTP request failed.  Got status code 401 from remote 
server while attempting to GET http://server:port/fedora/get/ns:myobject/DC
        at 
org.fcrepo.localservices.saxon.SaxonServlet.getInputStream(SaxonServlet.java:272)
        at 
org.fcrepo.localservices.saxon.SaxonServlet.apply(SaxonServlet.java:202)
        at 
org.fcrepo.localservices.saxon.SaxonServlet.doGet(SaxonServlet.java:148)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:128)
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
        at 
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:849)
        at 
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
        at 
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:454)
        at java.lang.Thread.run(Thread.java:619)


I  checked  Saxon's  web.xml  flie  and and tried to provide fedora's username 
and
passwd for this context

<init-param>
            
<param-name>http://server:port/fedora/get/ns:myobject/DC</param-name>
            <param-value>user:pass</param-value>
</init-param>
But it still doesn't work...

Do  you know what might be an issue? xacml policy? (for tests purposes
I set  <param name="ENFORCE-MODE" value="permit-all-requests"/> )



Best regards,
Damian



------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Fedora-commons-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users


===8<===========Koniec treści oryginalnej wiadomości===========



-- 
Pozdrowienia,
 Damian Kaliszan
------------------------------------------------------------------------------
Lotusphere 2011
Register now for Lotusphere 2011 and learn how
to connect the dots, take your collaborative environment
to the next level, and enter the era of Social Business.
http://p.sf.net/sfu/lotusphere-d2d
_______________________________________________
Fedora-commons-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/fedora-commons-users

Reply via email to